This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Dy4QwMBtZu3Asd_-qbvv_SZBJqo.roa File: Dy4QwMBtZu3Asd_-qbvv_SZBJqo.roa (raw, json) Hash identifier: 0YYlBbdbuTNv0nqIPWhA/PTOwOob1hzG9LsB6/psDdQ= Subject key identifier: 0F:2E:10:C0:C0:6D:66:ED:C0:B1:DF:FE:A9:BB:EF:FD:26:41:26:AA Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019ACAF2406868262B4CF49761E264324A35 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Dy4QwMBtZu3Asd_-qbvv_SZBJqo.roa Signing time: Fri 28 Nov 2025 14:51:05 +0000 ROA not before: Fri 28 Nov 2025 14:51:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 81.180.112.0/20 maxlen: 24 81.181.48.0/24 maxlen: 24 81.181.49.0/24 maxlen: 24 81.181.50.0/24 maxlen: 24 81.181.54.0/24 maxlen: 24 81.181.55.0/24 maxlen: 24 81.181.56.0/24 maxlen: 24 81.181.57.0/24 maxlen: 24 81.181.58.0/24 maxlen: 24 81.181.59.0/24 maxlen: 24 81.181.60.0/24 maxlen: 24 81.181.61.0/24 maxlen: 24 81.181.62.0/24 maxlen: 24 81.181.63.0/24 maxlen: 24 85.122.160.0/20 maxlen: 24 85.122.192.0/19 maxlen: 24 85.122.224.0/22 maxlen: 24 85.122.228.0/24 maxlen: 24 85.122.252.0/24 maxlen: 24 85.122.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:f2:40:68:68:26:2b:4c:f4:97:61:e2:64:32:4a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Nov 28 14:51:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f2e10c0c06d66edc0b1dffea9bbeffd264126aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:fd:0f:42:54:67:4d:f4:6a:79:7e:bc:f6: 5f:66:32:f9:59:9a:a5:88:7c:9e:d6:51:d2:60:fb: 82:06:96:62:4e:11:50:f7:36:06:9f:45:96:eb:6f: 34:e6:2f:db:e3:fc:90:d8:43:a8:6f:24:34:f8:e3: 45:bd:c2:cb:01:f1:52:85:85:fc:98:1c:55:17:28: b6:9d:90:c6:1c:a4:f5:b5:14:c9:ee:dd:a4:68:9e: 3e:03:b0:90:20:37:df:fd:4f:28:01:1f:57:43:8f: 28:01:9b:ba:a4:31:37:a5:69:35:a7:05:1e:c7:68: 33:0d:7b:8d:cb:a3:f2:37:ff:c5:12:40:56:a2:8a: 41:87:a7:a6:e4:b7:83:26:50:ab:12:5b:45:28:12: 1e:6b:ac:cb:23:bc:35:03:f2:1c:46:e5:4a:0e:15: 0f:ad:16:84:42:5a:cc:75:81:c1:b7:f3:14:36:53: 1d:d5:cf:80:51:4b:2d:e5:c2:87:4f:2b:56:5c:d2: 1a:64:45:82:05:cb:21:96:7b:22:a4:8a:0c:9a:07: b0:4f:fc:51:4c:85:99:8e:3b:4b:65:05:ed:2c:8f: 68:2e:6a:e0:3c:75:05:8c:ee:8e:bc:96:1f:7f:d8: 32:8f:63:8e:26:a8:58:7a:81:2e:e6:89:78:6a:fc: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2E:10:C0:C0:6D:66:ED:C0:B1:DF:FE:A9:BB:EF:FD:26:41:26:AA X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Dy4QwMBtZu3Asd_-qbvv_SZBJqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.180.112.0/20 81.181.48.0-81.181.50.255 81.181.54.0-81.181.63.255 85.122.160.0/20 85.122.192.0-85.122.228.255 85.122.252.0/23 Signature Algorithm: sha256WithRSAEncryption 76:99:67:e0:1c:ac:a5:db:02:17:ad:db:f0:02:2f:28:af:1c: 49:a6:ff:10:ea:f0:87:9a:78:c8:2e:92:a2:e1:e2:ce:3e:3b: 31:46:04:02:84:0d:5b:e9:37:19:eb:5c:bb:70:13:04:80:59: e9:d6:13:a0:2e:7f:e1:ee:15:37:55:8d:59:9c:2d:3f:7d:b5: fd:71:fc:24:28:53:5a:38:80:f3:8d:9d:f3:f4:eb:09:9e:bb: f4:f8:d0:73:b0:13:5d:b6:b8:3b:f4:ba:fc:a0:8e:d6:e1:f0: d4:90:61:1c:bc:7e:0a:8c:5f:dd:6b:ba:ef:d1:f0:13:0b:ca: 9b:a1:d2:d5:53:b6:d3:7a:d5:b8:8d:4c:e2:d5:7b:0e:aa:52: 01:97:e5:68:df:12:e5:ae:3c:a9:30:56:51:5a:b0:7d:7e:87: cb:ac:26:af:2c:b3:d6:76:d0:6d:49:ae:b2:8d:2b:f1:2c:aa: 0d:73:ca:2e:67:9d:17:df:97:71:88:da:77:75:2e:44:1e:32: 9d:bd:0f:aa:11:87:68:64:ed:d8:c1:18:4f:75:92:d9:cd:0e: 80:07:e5:d9:06:18:57:6f:75:be:36:8c:51:4e:64:62:f7:e9: 50:25:ce:1c:15:73:56:2b:38:db:91:72:fc:0f:ef:1a:92:7e: e3:37:28:a2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZrK8kBoaCYrTPSXYeJkMko1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjUxMTI4MTQ1MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjJlMTBjMGMwNmQ2NmVkYzBiMWRmZmVhOWJiZWZmZDI2NDEyNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybX9D0JUZ030anl+vPZfZjL5WZql iHye1lHSYPuCBpZiThFQ9zYGn0WW62805i/b4/yQ2EOobyQ0+ONFvcLLAfFShYX8 mBxVFyi2nZDGHKT1tRTJ7t2kaJ4+A7CQIDff/U8oAR9XQ48oAZu6pDE3pWk1pwUe x2gzDXuNy6PyN//FEkBWoopBh6em5LeDJlCrEltFKBIea6zLI7w1A/IcRuVKDhUP rRaEQlrMdYHBt/MUNlMd1c+AUUst5cKHTytWXNIaZEWCBcshlnsipIoMmgewT/xR TIWZjjtLZQXtLI9oLmrgPHUFjO6OvJYff9gyj2OOJqhYeoEu5ol4avyjNQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFA8uEMDAbWbtwLHf/qm77/0mQSaqMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvRHk0UXdNQnRadTNBc2RfLXFidnZfU1pCSnFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQEUbRwMAwD BARRtTADBABRtTIwDAMEAVG1NgMEBlG1AAMEBFV6oDAMAwQGVXrAAwQAVXrkAwQB VXr8MA0GCSqGSIb3DQEBCwUAA4IBAQB2mWfgHKyl2wIXrdvwAi8orxxJpv8Q6vCH mnjILpKi4eLOPjsxRgQChA1b6TcZ61y7cBMEgFnp1hOgLn/h7hU3VY1ZnC0/fbX9 cfwkKFNaOIDzjZ3z9OsJnrv0+NBzsBNdtrg79Lr8oI7W4fDUkGEcvH4KjF/da7rv 0fATC8qbodLVU7bTetW4jUzi1XsOqlIBl+Vo3xLlrjypMFZRWrB9fofLrCavLLPW dtBtSa6yjSvxLKoNc8ouZ50X35dxiNp3dS5EHjKdvQ+qEYdoZO3YwRhPdZLZzQ6A B+XZBhhXb3W+NoxRTmRi9+lQJc4cFXNWKzjbkXL8D+8akn7jNyii -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:10 2025 by rpki-client